This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
File:                     875E06F9E7034F27BB17B17F859BD523F124DED9.mft (raw, json)
Hash identifier:          lX5+wm1Gyeb2GuoiulUf1XPrWB7JbG2fz62FvCmrWGU=
Subject key identifier:   0D:82:7D:3A:3F:0D:7D:50:EE:22:C0:7F:CD:A1:F9:B4:77:CD:5C:E7
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       1BB7992157CED9436027C97B5851877C1417E516
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
Manifest number:          0157
Signing time:             Sun 21 Dec 2025 12:51:57 +0000
Manifest this update:     Sun 21 Dec 2025 12:46:57 +0000
Manifest next update:     Mon 22 Dec 2025 13:16:57 +0000
Files and hashes:         1: 34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa (hash: +FrAGbNXAdYP8Pg/39Rwp2kCBHQmS+GNecRIK54X8DY=)
                          2: 3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa (hash: dtLW+BKAXyh0XbtqxhyJwFT61qqx+1ewdQmC8tdwffY=)
                          3: 875E06F9E7034F27BB17B17F859BD523F124DED9.crl (hash: ZjanVb0UcPoL5SviUVqn6ejKHj1CPzzFkAAT6EJLNZs=)
                          4: 3136382e3230352e3230302e302f32322d3234203d3e20323632363433.roa (hash: 6hYL1AScEenC1R3PomvWNbwxg863EWC/9H1CMG413UI=)
                          5: 3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa (hash: ajD4Kp5vkLb88kXcqGYZjNrIHeoaWOLwL+xcCtKorEA=)
                          6: 323830343a313439633a3a2f33322d3438203d3e20323632363433.roa (hash: MZySJ9O65lOMB41izMUoiG2UbNQhdh7QbaXRVWlgOJE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 13:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b7:99:21:57:ce:d9:43:60:27:c9:7b:58:51:87:7c:14:17:e5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Dec 21 12:46:57 2025 GMT
            Not After : Dec 22 13:16:57 2025 GMT
        Subject: CN=0D827D3A3F0D7D50EE22C07FCDA1F9B477CD5CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:47:d4:b3:91:8a:07:be:d9:8b:85:37:50:
                    db:02:87:1f:7f:db:3b:fe:0c:fa:20:89:2a:ce:84:
                    06:f9:d1:73:c8:ee:95:6b:d2:31:77:1d:d0:f9:e0:
                    34:1d:19:d1:c1:c5:d4:5e:c4:39:ad:fc:5e:4f:49:
                    99:9c:55:4a:59:ee:a4:a9:de:a6:c4:4f:f2:b8:94:
                    c1:96:08:a2:1f:96:f9:78:45:c4:3a:21:c7:77:f0:
                    f2:67:fd:d3:26:2f:d1:7d:7d:9f:11:ee:d8:dc:2b:
                    6f:91:52:0f:30:e6:50:7a:26:aa:e6:e1:fe:b2:70:
                    ae:8c:48:6f:70:8d:e8:00:2a:d5:11:94:bd:68:d8:
                    bc:95:bc:ce:21:15:9c:f8:cd:43:2c:c4:d7:7e:9d:
                    5d:f3:2f:4a:e7:b2:b0:b1:55:56:f0:2d:81:22:86:
                    54:4c:73:e8:ed:07:ea:8d:10:17:59:74:50:0c:1e:
                    e9:fa:53:fc:66:0d:44:a4:b1:8e:58:5e:0d:72:eb:
                    d0:66:28:17:fd:33:21:8e:80:d9:f3:48:fa:08:3f:
                    9f:2a:83:ac:f4:2a:fe:e1:30:6c:4f:80:98:99:c8:
                    86:ef:95:cf:ce:87:6d:e5:e3:42:4c:11:f5:72:d9:
                    27:9f:09:50:46:a5:98:8e:c0:4b:e6:ef:0c:fc:46:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:82:7D:3A:3F:0D:7D:50:EE:22:C0:7F:CD:A1:F9:B4:77:CD:5C:E7
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:25:fb:da:fa:e5:a0:56:93:72:19:34:7a:41:71:b4:b9:0f:
         10:97:c7:e3:e6:3e:96:13:e3:6e:f7:ea:c5:a9:8a:52:9f:f8:
         14:bc:76:b7:e1:c0:3b:c6:47:63:75:ef:86:5f:33:a3:61:a5:
         ea:bc:98:e5:db:fe:23:74:33:fc:50:af:87:3d:06:12:13:70:
         f9:ff:3f:53:31:ed:83:5f:41:21:75:a9:c2:d0:ee:01:85:6f:
         fe:d5:4c:d8:25:ad:f3:5c:a0:ef:0a:94:10:f6:a3:75:71:e1:
         dc:f2:ba:fd:a4:b3:32:43:54:91:4e:87:35:70:7a:7d:bd:06:
         db:11:d9:f0:cc:6e:3d:2e:5f:5a:f3:f7:32:88:c4:33:4c:dd:
         95:51:61:06:ee:e7:f6:72:12:65:07:b8:45:bb:89:55:ae:f5:
         79:fc:24:06:66:19:6b:9b:66:b1:0a:c3:b4:9a:46:78:ec:0c:
         72:50:62:fa:d5:26:2b:a4:d7:b7:e3:0a:5f:96:fe:3f:cd:e4:
         1a:0a:9f:39:0f:87:05:71:e9:fd:31:20:84:c9:47:40:12:d7:
         2b:44:55:68:a7:63:92:e5:2d:7f:4f:c3:1d:88:7f:86:84:54:
         89:0a:82:c6:eb:03:0b:22:bc:d7:19:52:08:ff:a3:97:b3:dd:
         aa:0d:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:02:27 2025 by rpki-client